Topic
1

In 2-3
brief paragraphs, discuss the pros and cons of FISMA.

A.Describe and discuss the objectives of
policy-makers.

B.Describe and discuss the general problems
that limit the effectiveness of documents that try to govern Cybersecurity.

C.Discuss ideas that there are for improving
national security in light of these issues?

Topic
2

A.
Discuss
the techniques that your workplace uses for quantifying information security
losses?

B.
What
do you think they should use and why?

Topic
4

State
whether you agree or disagree with the following statement and explain your
reasoning:“Not all federal agencies
need to follow FISMA or NIST recommendations for maintaining cybersecurity.
After all, if the cyber-infrastructure of the Equal Employment Opportunity
Commission (EEOC) is attacked, no real harm is done to anyone except the
complaints.

Instructions

Make
sure that there is no plagiarism. Also make sure that the references that are
provide are used and referenced in APA 6^th edition.THE ATTACHED PDF MUST BE USED!

Required Reading for References:

• Evans, D. L., Bond, P. J., & Bement, A. L. (2004,
  February). Federal information processing standards publication: Standards
  for security categorization of federal information and information
  systems. Retrieved fromhttp://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf
• Gutierrez, C. M., & Jeffrey, W. (2006, March).
  Federal information processing standards publication: Minimum security
  requirements for federal information and information systems. Retrieved
  fromhttp://csrc.nist.gov/publications/fips/fips200/FIPS-200-final-march.pdf
• Locke, G., & Gallagher, P. D. (2009, August).
  Recommended security controls for federal information systems and
  organizations. Retrieved fromhttp://csrc.nist.gov/publications/nistpubs/800-53-Rev3/sp800-53-rev3-final_updated-errata_05-01-2010.pdf
• United States. Executive Office of the President.
  (2003, December 17). Homeland Security Presidential Directive / HSPD-7.
  Retrieved fromhttp://www.fas.org/irp/offdocs/nspd/hspd-7.html
• United States. National Institute of Standards and
  Technology. (2011, March 1). Federal Information Security Management Act
  (FISMA) implementation project. Retrieved fromhttp://csrc.nist.gov/groups/SMA/fisma/index.html

• Hulitt, E., & Vaughn, R. B. (2009). Information
  system security compliance toFISMA standard: A quantitative measure.
  Paper presented at the International Multiconference on Computer Science
  and Information Technology. Retrieved fromhttp://www.proceedings2008.imcsit.org/pliks/99.pdf
• Landry, M. (2006, February). It’s the law: An overview
  of FISMA and its impact on current security practices. ISSA Journal.
  Available under Reserved Readings on WebTycho.
• Nowell, C. (2010, May 2). Regulatory compliance – the
  wonderful world of FISMA. Information Systems Security, 16(5), 278-280.
  Available from the UMUC library (need to log in with your last name and
  bar code).
• United States. Office of Management and Budget. (n.d.).
  Appendix III to OMB Circular No. A-130. Retrieved fromhttp://www.whitehouse.gov/omb/circulars_a130_a130appendix_iii